$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft File: 2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json) Hash identifier: 5/dcstBzW41RDv93RX18HFDJpXb4d/EMT+VNW3wcnpI= Subject key identifier: CD:91:17:CA:FF:FA:AB:80:FB:00:DC:61:E1:68:DE:5F:2B:F9:42:F0 Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D Certificate issuer: /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft Manifest number: 066C Signing time: Tue 24 Mar 2026 22:17:07 +0000 Manifest this update: Tue 24 Mar 2026 22:17:06 +0000 Manifest next update: Tue 31 Mar 2026 22:17:06 +0000 Files and hashes: 1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: OUyvlHAsCELsVIXAGv8kJ2drjYo0RgT3ar00o5GIWG4=) 2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: /3x4vYPiXoG8rAiPY7APpgt+Ap9Ktaa/xQN8yrKkbXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Validity Not Before: Mar 24 22:17:06 2026 GMT Not After : Mar 31 22:17:06 2026 GMT Subject: CN=69c30d62-a07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8b:32:3d:2b:b7:b3:ef:84:4d:bd:9f:f9:b5: 82:06:6b:75:af:fa:9c:1f:29:ba:fb:b0:a3:5e:0f: 6e:9c:70:a7:73:0b:35:15:54:30:21:21:ca:03:f0: e9:d1:37:09:ba:20:1f:a5:a8:ee:be:f0:37:ec:a4: 8c:69:c3:dc:56:fb:80:f2:06:41:f1:ae:e1:30:2c: d0:26:8e:7c:df:56:40:3d:11:e2:84:6f:3a:eb:89: 01:8a:90:8f:d8:1d:a3:30:a6:f5:0d:72:d4:0a:2f: 68:af:f0:ad:d6:ce:5d:b9:35:d0:3e:59:18:52:37: 79:a3:20:7a:e2:8b:24:64:2f:e3:84:bd:dc:9d:5e: 67:d8:c8:b3:11:36:73:09:bb:e6:51:4e:b7:4c:67: 73:c0:28:48:24:a1:6b:97:ca:87:3f:35:d1:f4:53: dd:95:83:24:fe:ec:4c:8a:e6:78:73:18:45:fc:6a: d8:21:b6:07:c5:ae:cb:d3:69:49:2a:fc:26:6d:45: 3a:22:85:96:92:71:bd:9c:7d:dc:f3:32:82:af:9d: 4d:39:5c:d9:30:1e:7f:d9:3f:d3:8c:9a:8a:c5:b0: 4b:46:ad:2c:4a:88:e7:34:63:1e:75:64:ec:b6:41: 6a:2b:5d:37:33:35:56:33:d8:c3:66:06:70:d2:4a: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:91:17:CA:FF:FA:AB:80:FB:00:DC:61:E1:68:DE:5F:2B:F9:42:F0 X509v3 Authority Key Identifier: keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:56:b6:f1:6e:08:22:67:4c:8a:55:44:9e:63:27:ad:c8:3a: d8:72:4e:5b:f1:89:43:b6:e1:24:4a:f7:7f:95:7a:05:a3:02: fa:32:ca:14:f6:a1:1c:bd:ac:fa:40:83:9b:36:e5:57:82:be: 1e:83:7f:b7:8f:24:ea:21:e4:06:75:b5:34:a2:cc:e8:62:b0: dd:4d:07:cf:69:d1:09:8f:b4:c6:ef:d6:9e:02:ea:ab:fc:c4: 8f:7e:d5:c4:b2:c6:16:f7:9c:6b:95:9d:f1:83:01:ca:18:42: 36:83:97:14:6d:65:04:bd:be:f5:5f:48:06:8f:77:40:e1:98: 8a:66:74:1b:7a:4f:b4:3c:c5:43:28:a4:0d:e3:ea:e2:35:4b: 19:2e:99:a4:80:59:39:38:f4:78:34:ac:9d:a1:fb:6b:9a:4b: 65:d5:a1:ac:4d:ed:c9:c0:d3:ee:74:36:b6:62:ae:a4:2d:d4: 07:02:18:31:8b:92:fe:f6:17:5b:39:53:1d:17:50:8a:68:b4: b8:e8:ac:28:80:55:e6:6c:84:58:dc:55:48:cf:50:b4:f5:2d: 79:d9:e5:2c:8b:11:72:72:93:ab:76:c3:8a:d3:3a:b9:56:44: 64:6e:d2:e6:02:83:72:1b:fa:e5:6e:29:f9:25:93:82:6e:fe: 5f:51:4b:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE NDAxODMxNkQwHhcNMjYwMzI0MjIxNzA2WhcNMjYwMzMxMjIxNzA2WjAYMRYwFAYD VQQDEw02OWMzMGQ2Mi1hMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64syPSu3s++ETb2f+bWCBmt1r/qcHym6+7CjXg9unHCncws1FVQwISHKA/Dp 0TcJuiAfpajuvvA37KSMacPcVvuA8gZB8a7hMCzQJo5831ZAPRHihG8664kBipCP 2B2jMKb1DXLUCi9or/Ct1s5duTXQPlkYUjd5oyB64oskZC/jhL3cnV5n2MizETZz CbvmUU63TGdzwChIJKFrl8qHPzXR9FPdlYMk/uxMiuZ4cxhF/GrYIbYHxa7L02lJ KvwmbUU6IoWWknG9nH3c8zKCr51NOVzZMB5/2T/TjJqKxbBLRq0sSojnNGMedWTs tkFqK103MzVWM9jDZgZw0kozeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2RF8r/ +quA+wDcYeFo3l8r+ULwMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVCRC8zMTIwMDY1RUJDNUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFh cnVDUnNfbFZsZGJVQVlNVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL1a28W4IImdMilVEnmMnrcg62HJOW/GJQ7bhJEr3f5V6BaMC+jLKFPahHL2s +kCDmzblV4K+HoN/t48k6iHkBnW1NKLM6GKw3U0Hz2nRCY+0xu/WngLqq/zEj37V xLLGFveca5Wd8YMByhhCNoOXFG1lBL2+9V9IBo93QOGYimZ0G3pPtDzFQyikDePq 4jVLGS6ZpIBZOTj0eDSsnaH7a5pLZdWhrE3tycDT7nQ2tmKupC3UBwIYMYuS/vYX WzlTHRdQimi0uOisKIBV5myEWNxVSM9QtPUtednlLIsRcnKTq3bDitM6uVZEZG7S 5gKDchv65W4p+SWTgm7+X1FLkA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:38 2026 by rpki-client